@ngockhoale/ukit 3.0.4 → 3.0.6

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to UKit are documented here.
 
+## 3.0.6 - 2026-09-24
+
+- Clarified the project owner's `unic-decision` contract in owner instructions, project memory, the technical spec, and shipped internals: a local Lava/JEV model in UNIC Provider, not an LLM; the OpenAI-compatible API is transport for convenient integration, not evidence of remote hosting or generative-model pricing.
+- Documented the preferred bounded typed-decision usage and the existing stage-off rollout/fallback in package-side client/config comments and the installed adapter, without changing runtime behavior or enabling decision calls.
+
+
+## 3.0.5 - 2026-09-24
+
+- **Review-fix hardening (cycle C53 fix round 1)** — defects found by the release reviewer after 3.0.4 shipped:
+  - **Memory**: `appendCompactHistory` read-modify-write now runs under the store lock — concurrent appends can no longer lose entries (unlocked RMW race).
+  - **Installed mirror**: restored the missing `index-core` declaration in the installed `.claude/ukit/` mirror so dev-mirror parity checks pass on hydrated workspaces.
+  - **Shipped hooks**: `sensitive-data-guard` no longer bypassed by wrapper commands (`sudo`/`env`/`bash -c`/`xargs`) or basename-obfuscated invocations — the guard now unwraps wrappers and matches on the real binary name.
+  - **Test scoping**: `payloadDocs` stale-prose sweep restricted to shipped surfaces (root docs, `template_project`, `src`, `bin`, `scripts`) — it no longer walks `docs/AI_HANDOFF/**` reports or gitignored runtime dirs; `mirrorPayload` parity now tolerates stale/runtime files under the gitignored installed mirror.
+  - **Installed-mirror resync**: stale `index/detectProjectContext.js`, query-index cache, lock dirs, and resolve-context cache regenerated so the installed mirror matches the template payload.
 
 ## 3.0.4 - 2026-09-24
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngockhoale/ukit",
-  "version": "3.0.4",
+  "version": "3.0.6",
   "description": "Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).",
   "license": "MIT",
   "type": "module",

package/src/cli/commands/memory.js

@@ -18,9 +18,8 @@ import {
 import {
   addUserRecord,
   getUserRecord,
-  loadUserRecords,
   queryUserRecords,
-  saveUserRecords,
+  removeUserRecord,
   updateUserRecord,
   userMemoryStats,
 } from '../../core/memory/userMemory.js';
@@ -297,12 +296,10 @@ async function runUserMemory(homeDir, args) {
     if (!id) {
       throw new Error('Missing record id. Usage: ukit memory --user forget <id>');
     }
-    const records = await loadUserRecords({ homeDir });
-    const remaining = records.filter((r) => r.id !== id);
-    if (remaining.length === records.length) {
+    const removed = await removeUserRecord(id, { homeDir });
+    if (!removed) {
       throw new Error(`User memory record not found: ${id}`);
     }
-    await saveUserRecords(remaining, { homeDir });
     console.log(`[UKit] Forgot user record ${id}.`);
     return;
   }

package/src/core/memory/userMemory.js

@@ -63,6 +63,21 @@ export async function updateUserRecord(id, patch = {}, { homeDir } = {}) {
   });
 }
 
+/**
+ * removeUserRecord(id, {homeDir}={}) → record | null
+ * Deletes the record with `id` under the shared store lock — a concurrent
+ * add/update cannot be clobbered by the removal. Returns the removed record,
+ * or null when the id is absent.
+ */
+export async function removeUserRecord(id, { homeDir } = {}) {
+  return mutateRecordStore(userRecordsPath(homeDir), (records) => {
+    const index = records.findIndex((r) => r.id === id);
+    if (index === -1) return null;
+    const removed = records[index];
+    return { result: removed, records: records.filter((r) => r.id !== id) };
+  });
+}
+
 /**
  * getUserRecord(id, {homeDir}={}) → record | null
  */

package/src/core/runtimeConfig.js

@@ -293,9 +293,12 @@ export function buildDefaultRuntimeConfig(overrides = {}) {
       fastPath: { stage: 'off' },
       escalation: { stage: 'off' },
     },
-    // C52 M07 UNIC Decision Agent (docs/pstack/UNIC_DECISION_SPEC §17). All
-    // stages ship 'off' — zero outbound calls, deterministic policy stays
-    // authoritative. `enabled:false` is the global emergency disable.
+    // C52 M07: `unic-decision` is the owner's local non-LLM Lava/JEV model in
+    // UNIC Provider. Its OpenAI-compatible API is transport only, not proof of
+    // remote hosting or generative-LLM billing. Prefer bounded typed decisions
+    // when staged on; all stages currently ship 'off' (no decision request),
+    // deterministic safety/completion policy stays authoritative.
+    // `enabled:false` is the global emergency disable.
     decisionPlane: {
       enabled: true,
       stage: 'off',

package/src/decision/client.js

@@ -1,9 +1,17 @@
 /**
  * client.js (TASK-002 / M07)
  *
- * Typed client for the UNIC Decision Agent: OpenAI-compatible
- * `POST <baseUrl>/v1/chat/completions` against the configured UNIC gateway
- * (docs/pstack/UNIC_DECISION_SPEC.md §3/§15/§16).
+ * Typed client for the owner's LOCAL `unic-decision` model in UNIC Provider.
+ * It uses Lava/JEV technology and is NOT an LLM. OpenAI-compatible
+ * `POST <baseUrl>/v1/chat/completions` is only its interoperability transport,
+ * not evidence of remote hosting, generative semantics, or LLM pricing.
+ * See docs/pstack/UNIC_DECISION_SPEC.md (identity, §3/§15/§16).
+ *
+ * Prefer bounded classify/select/rank/score questions when decisionPlane.stage
+ * enables the caller; derive candidates in code, pass compact state and typed
+ * questions to createDecisionClient(...).requestBatch({ statePacket, questions }),
+ * then validate the outcome and retain deterministic safety/permission gates.
+ * The client does not itself switch a disabled rollout stage on.
  *
  * - Endpoint + credentials resolve via gatewayProbe env indirection only —
  *   no literal keys, no new credential store.

package/src/index/resolveContext.js

@@ -10,9 +10,9 @@ const TASK_TYPE_BUDGETS = {
 
 const TRIVIAL_SIGNALS = ['typo', 'label', 'text', 'rename', 'color', 'spacing', 'toggle', 'config', 'comment'];
 const RISKY_SIGNALS = [
-  'auth', 'security', 'migration', 'uninstall', 'password', 'token', 'permission',
-  'delete all', 'drop table', 'race', 'flaky', 'intermittent', 'timeout', 'deadlock',
-  'core', 'shared', 'runtime',
+  'auth', 'authentication', 'authorization', 'security', 'migration', 'uninstall',
+  'password', 'token', 'permission', 'delete all', 'drop table', 'race', 'flaky',
+  'flakiness', 'intermittent', 'timeout', 'deadlock', 'core', 'shared', 'runtime',
 ];
 const EXPANSION_SIGNALS = [
   'similar',
@@ -39,12 +39,15 @@ const EXPANSION_SIGNALS = [
 
 // Signals must match whole words: bare `includes` let 'score' fire 'core',
 // 'author' fire 'auth', 'context' fire 'text', and 'install ' fire 'all '.
+// Common inflections (plural/past/-ing) still count — 'timeouts', 'migrations',
+// 'deadlocked' — but 'authentication'/'authorization'/'flakiness' need explicit
+// entries since their stems diverge from the base signal.
 function escapeSignalRegExp(signal) {
   return signal.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
 
 function containsSignalWord(lower, signals) {
-  return signals.some((signal) => new RegExp(`\\b${escapeSignalRegExp(signal)}\\b`).test(lower));
+  return signals.some((signal) => new RegExp(`\\b${escapeSignalRegExp(signal)}(?:s|es|ed|d|ing)?\\b`).test(lower));
 }
 
 export async function resolveContext({

package/template_project/.claude/hooks/sensitive-data-guard.mjs

@@ -271,9 +271,25 @@ async function evaluate({ rawInput, projectRoot, env }) {
         if (t === undefined) break;
         if (t === '--') { headIdx += 1; break; }
         if (isAssignToken(t)) { headIdx += 1; continue; }
+        if (wrapperPositionalPending > 0 && !isVerbToken(t) && !isFlagToken(t)) {
+          // The wrapper's own operand (user/host/duration/image/service), then
+          // the next token is the real command. Consumed BEFORE the wrapper
+          // branch so a 0-positional wrapper token sitting in an operand slot
+          // (`exec` after `docker`/`kubectl`) cannot clobber the pending count.
+          // Flags are never operands — they fall through to the flag branch.
+          wrapperPositionalPending -= 1;
+          headIdx += 1;
+          continue;
+        }
         const positionalCount = wrapperPositionals(t);
         if (positionalCount !== undefined) {
           wrapperPositionalPending = positionalCount;
+          // `docker compose <sub> <svc> <cmd>` carries one extra operand (the
+          // service) beyond the flat two — `compose` is a sub-CLI, not a
+          // subcommand like `exec`.
+          if (positionalCount === 2 && unquote(tokens[headIdx + 1]) === 'compose') {
+            wrapperPositionalPending += 1;
+          }
           headIdx += 1;
           continue;
         }
@@ -291,18 +307,12 @@ async function evaluate({ rawInput, projectRoot, env }) {
           }
           continue;
         }
-        if (wrapperPositionalPending > 0 && !isVerbToken(t)) {
-          // The wrapper's own operand (user/host/duration/image), then the
-          // next token is the real command.
-          wrapperPositionalPending -= 1;
-          headIdx += 1;
-          continue;
-        }
         break;
       }
       const effectiveHead = unquote(tokens[headIdx] ?? '');
+      const headBase = effectiveHead.replace(/^.*\//, '');
 
-      if (DUMP_VERBS.has(effectiveHead)) {
+      if (DUMP_VERBS.has(headBase)) {
         for (const token of tokens.slice(headIdx + 1)) {
           const cleaned = token.replace(/^["']+|["',:]+$/g, '');
           const kind = classifySecretFile(cleaned);
@@ -312,7 +322,6 @@ async function evaluate({ rawInput, projectRoot, env }) {
         }
       }
 
-      const headBase = effectiveHead.replace(/^.*\//, '');
       const CRED_USER_TOOLS = new Set(['curl', 'wget', 'ftp', 'lftp', 'aria2c', 'http', 'https']);
       // `-uuser:pass`, `-u user:pass`, `--user=user:pass`, `--user user:pass` —
       // the old `\s+` separator missed the joined and `=` forms entirely.

package/template_project/.claude/ukit/index/lib/index-core.mjs

@@ -967,6 +967,7 @@ async function tryIncrementalIndexUpdate({ absoluteRoot, indexDir, changedPaths,
   const previousCodePaths = new Set(
     filesArtifact.items.filter((item) => CODE_EXTENSIONS.has(item?.ext)).map((item) => item.filePath),
   );
+  const currentCodePaths = new Set(codeFiles.map((file) => file.filePath));
   const canReuseArchetypes = parsedFiles.length === 0
     && !recordsChanged
     && archetypesArtifact?.schemaVersion === INDEX_SCHEMA_VERSION
@@ -1358,11 +1359,10 @@ const TASK_TYPE_BUDGETS = {
   'non-trivial': { minFiles: 4, maxFiles: 8 },
 };
 
-const TRIVIAL_SIGNALS = ['typo', 'label', 'text', 'rename', 'color', 'spacing', 'toggle', 'config', 'comment'];
 const RISKY_SIGNALS = [
-  'auth', 'security', 'migration', 'uninstall', 'password', 'token', 'permission',
-  'delete all', 'drop table', 'race', 'flaky', 'intermittent', 'timeout', 'deadlock',
-  'core', 'shared', 'runtime',
+  'auth', 'authentication', 'authorization', 'security', 'migration', 'uninstall',
+  'password', 'token', 'permission', 'delete all', 'drop table', 'race', 'flaky',
+  'flakiness', 'intermittent', 'timeout', 'deadlock', 'core', 'shared', 'runtime',
 ];
 const EXPANSION_SIGNALS = [
   'similar',
@@ -1389,12 +1389,15 @@ const EXPANSION_SIGNALS = [
 
 // Signals must match whole words: bare `includes` let 'score' fire 'core',
 // 'author' fire 'auth', 'context' fire 'text', and 'install ' fire 'all '.
+// Common inflections (plural/past/-ing) still count — 'timeouts', 'migrations',
+// 'deadlocked' — but 'authentication'/'authorization'/'flakiness' need explicit
+// entries since their stems diverge from the base signal.
 function escapeSignalRegExp(signal) {
   return signal.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
 
 function containsSignalWord(lower, signals) {
-  return signals.some((signal) => new RegExp(`\\b${escapeSignalRegExp(signal)}\\b`).test(lower));
+  return signals.some((signal) => new RegExp(`\\b${escapeSignalRegExp(signal)}(?:s|es|ed|d|ing)?\\b`).test(lower));
 }
 
 export async function resolveContext({

package/template_project/.claude/ukit/index/unic-decision.mjs

@@ -2,8 +2,12 @@
 /**
  * unic-decision.mjs (TASK-005 / M07, SPEC §5 FR-011)
  *
- * Standalone installed-side adapter for the UNIC Decision Agent
- * (docs/pstack/UNIC_DECISION_SPEC.md §8/§9, CONTRACTS.md C13/C14).
+ * Standalone installed-side adapter for the owner's local, non-LLM
+ * Lava/JEV `unic-decision` model in UNIC Provider. OpenAI-compatible
+ * /v1/chat/completions is a transport for easy integration, not evidence of
+ * an external generative LLM or LLM pricing. Prefer bounded typed semantic
+ * decisions when the caller's decisionPlane stage is enabled; this adapter
+ * does not change the rollout stage or override deterministic safety gates.
  *
  * Modes:
  *   node unic-decision.mjs --health-probe        one no-tools request; the ONLY

package/template_project/docs/UKIT_INTERNALS.md

@@ -140,6 +140,15 @@ the root contract is the only carrier — keep both in sync with
 
 ## 3-Tier Model Routing — full detail
 
+`unic-decision` is **not** another LLM tier. The owner built this local,
+near-zero-cost Lava/JEV model in UNIC Provider for fast typed semantic
+decisions; the OpenAI-compatible API is a convenience transport, not a
+generative-LLM or external-hosting claim. When `decisionPlane.stage` enables
+it, use bounded candidate choices/rankings/scores through
+`.claude/ukit/index/unic-decision.mjs`; keep safety, authorization and
+completion gates deterministic. The shipped stage is `off` until explicitly
+promoted. See `docs/pstack/UNIC_DECISION_SPEC.md` in the UKit development repo.
+
 UKit routes tasks to one of three model tiers based on task complexity. The main session
 model never changes mid-turn: a tier only takes effect when work is handed to an agent
 whose own definition binds that model.